Thousands of companies had their data captured by DataSpii. The following is only a fraction of those companies:

Impacted companiesLeaked data made accessible via Company X.

 

23andMeShared 23andMe reports
AlienVaultJIRA data from alienvault.atlassian.net
Amazon Web ServicesAWS S3 query string authentication parameters
American AirlinesPassenger information including: First name, last name, flight confirmation number
AmgenLAN network data collected from visitor(s) on the amgen inc. ISP network
AppleLast 4 digits of credit cards used for Apple product orders, credit card type, store used to pickup an Apple order, first and last name of the Apple order customer, iCloud Email addresses
Shared iCloud Photos including iOS user first and last name.
AthenaHealthLAN network data collected from visitor(s) on the athenahealth ISP network
AtlassianNear real-time data of corporate issues and employee-assigned tasks from thousands of atlassian.net subdomains.
Blue OriginJIRA data hosted on blueorigin.com domain, originating from visitor(s) city listed as: Kent, Washington
BuzzFeedJIRA data from buzzfeed.atlassian.net
CapitalOneZoom meeting URLs from capitalone.zoom.us
CardinalHealthJIRA data from cardinalhealth.atlassian.net
DellZoom meeting URLs from dell.zoom.us
DrChronoPatient names, names of medication
Epic SystemsLAN network data collected from visitor(s) on the epic systems corporation ISP network
FacebookFacebook Messenger attachments including tax returns
FireEyeJIRA data hosted on fireeye.com domain, originating from visitors on the fireeye, inc. ISP network
IntuitQuickbooks invoices
Kaiser PermanenteLAN network data collected from visitor(s) of kaiser foundation health plan ISP network

 

KareoPatient names
MerckLAN network data collected from visitor(s) on merck and co. inc. ISP network
Microsoft OneDriveFiles shared on OneDrive including tax returns
NBCDigitalJIRA data from nbcdigital.atlassian.net
NestShared Nest security camera clips
NetAppZoom meeting URLs from netapp.zoom.us
OracleZoom meeting URLs from oracle.zoom.us
Palo Alto NetworksLAN network data collected from visitor(s) of Palo Alto Networks ISP network
PfizerLAN network data collected from visitor(s) of pfizer inc. ISP network
RedditJIRA data from reddit.atlassian.net
RocheLAN network data collected from visitor(s) on hoffmann laroche inc.  ISP network
ShopifyImpacted by AWS S3 query string parameter leak
SkypeShared Skype chat URLs
Southwest AirlinesPassenger information including: First name, last name, and flight confirmation number
Members of Company X can see these users checking-in in near real-time.  Such data can be used to modify a flight, cancel a flight, or stalk the person, etc.
SpaceXLAN network data collected from visitor(s) on the space exploration technologies corporation ISP network
SymantecLAN network data collected from visitor(s) on the symantec corporation ISP network
TeslaLAN network data collected from visitor(s) on the tesla inc. ISP network
TmobileJIRA data from tmobile.atlassian.net
Trend MicroJIRA data collected from visitors on a non-publicly resolvable trendmicro.com subdomain.
UberPassenger pickup and drop-off locations for impacted users that booked rides via m.uber.com, Zoom meeting URLs from uber.zoom.us
UCLAZoom meeting URLs from ucla.zoom.us
Under ArmourJIRA data from underarmour.atlassian.net
United AirlinesPassenger last names and their flight confirmation numbers
WalmartZoom meeting URLs from walmart.zoom.us
ZendeskSupport ticket attachments, which (via HTTP referer) can even further be refined by the Zendesk client, (e.g., Venmo).
Zoom Video CommunicationsZoom meeting URLs